The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle
    web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a
    csv_table directive, a different vulnerability than CVE-2006-3458. (CVE-2006-4684)

It was discovered that the Zope web application server does not disable the csv_table directive in web pages containing ReST markup, allowing the exposure of files readable by the Zope server.

Secunia reports :

A vulnerability has been reported in Zope, which can be exploited by malicious people to disclose potentially sensitive information.

The vulnerability is caused due to an error in the use of the docutils module to parse and render 'restructured' text. This can be exploited to disclose certain information via the 'csv_table' reStructuredText directive.

ID	Name	Product	Family	Type	Severity
432042	SCA: security update for zope2 (GHSA-hm8g-jxjj-gfm3)	Tenable Cloud Security	SCA Checks	Local	high
432042	SCA: security update for zope2 (GHSA-hm8g-jxjj-gfm3)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
22718	Debian DSA-1176-1 : zope2.7 - programming error	Nessus	Debian Local Security Checks	Local	medium
22454	FreeBSD : zope -- restructuredText 'csv_table' Information Disclosure (65a8f773-4a37-11db-a4cc-000a48049292)	Nessus	FreeBSD Local Security Checks	Local	medium

Detections

Analytics

CVE-2006-4684

high

Tenable Plugins

high

high

medium

medium